Heritage Straits Coins banner featuring a black-and-white photograph of Boat Quay along the Singapore River, depicting mid-20th-century riverfront buildings and boats in 1953.

Privacy Policy

Across borders, united by heritage and the love of coins!

Welcome to our Privacy Policy

Effective date: 15 November 2025 -  Last updated: 5 October 2026

Heritage Straits Coins Pty Ltd (ABN 40 692 894 250, ACN 692 894 250, PO Box 20832, World Square NSW 2002, Australia) (“we”, “us”, “our”) operates www.heritagestraitscoins.com.au (the “Site”) and sells premium bullion and collectible coins and related accessories (the “Services”). Our store is powered by Shopify.

This Privacy Policy explains how we collect, use, disclose and protect your personal information when you visit the Site, buy from us or communicate with us. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using the Site or buying from us, you acknowledge that you have read this policy.

1. Personal information we collect

“Personal information” means information that identifies you or can reasonably be linked to you. It does not
include information that is anonymous or has been de-identified. Depending on how you interact with us, we may collect:   

  • Contact details: your name, billing and delivery addresses, phone number and email address.     
  • Order and payment information: the items you view, add to your cart, buy, return or cancel; your order history; and payment confirmations. PayPal processes PayPal payments, and we do not collect or store your card details. For bank deposits, we see the details that appear on our bank statement, such as the payer’s name, account details and payment reference.    
  • Account information: your username, password, preferences and settings.  
  • Identification information: where we ask for it (see section 5), a copy of your photo identification and the details on it, such as your name, date of birth and document number. 
  • Communications: the information you include when you contact us, whether by email, our enquiry form, social media or eBay.
  • Marketing preferences: whether you have subscribed to or unsubscribed from our emails.    
  • Device and usage information: your IP address, browser and device type, the pages you visit and how you reach and move around the Site, collected through cookies and similar technologies.

We do not intentionally collect sensitive information (such as health or political information) and ask that you do not send it to us.

2. Personal information sources

We collect personal information:    

  • directly from you, for example when you create an account, place an order, subscribe to our emails or contact us; 
  • automatically through the Site, using cookies and similar technologies (see section 3);
  • from our service providers, such as Shopify, PayPal and Australia Post, when they act on our behalf; and
  • from other third parties, such as eBay if you buy from us there, or from identity and fraud-prevention checks.

Where practicable, you can deal with us anonymously or under a pseudonym, for example when asking a general question. We need your real details to process orders and verify identity where required.

3. Cookies, analytics and advertising

The Site uses cookies and similar technologies, which are small files stored on your device. We use them to:

  • make the Site work (for example, your cart, checkout and security), which are set by Shopify and are essential;
  • understand how the Site is used, using analytics tools such as Google Analytics; and
  • show you advertising for our products on the Site and on other websites, including based on items you have viewed or added to your cart, using advertising tools such as Meta and Google Ads.

You can control cookies through your browser settings, and manage advertising preferences through your Google and Meta ad settings. Blocking some cookies may stop parts of the Site working properly.

4. How we use personal information

We use personal information to:

  • Provide the Services: process payments, fulfil and deliver orders, handle returns and refunds, manage your account and remember your preferences.
  • Communicate with you: answer questions, provide customer support and send order and account notifications.
  • Market to you: send newsletters and promotions by email where you have agreed, and show you relevant advertising (see sections 3 and 6).
  • Protect you and us: authenticate accounts, prevent and investigate fraud and other unlawful activity, and keep the Site secure.
  • Improve the Site and our range: analyse how the Site is used and what customers are interested in.
  • Meet legal obligations: comply with the law and respond to valid legal requests, and to establish, exercise or defend legal claims.

5. Identity verification and legal obligations

For orders of AUD $10,000 or more, and where we reasonably consider it necessary to prevent fraud or meet our legal obligations, we ask for photo identification. We use it only to verify your identity and meet our obligations, including under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 where it applies. We keep it only for as long as the law requires.

We may be required to report certain information to authorities such as AUSTRAC and, in some cases, we are not permitted to tell you that we have done so.

6. Marketing

We send marketing emails only where you have agreed (for example, by subscribing) or where the law otherwise permits. Every marketing email includes an unsubscribe link, and we act on unsubscribe requests within 5 business days. If you opt out, we may still send you service messages such as order confirmations, shipping updates and account notices. We never sell your personal information to others for their own marketing.

7. How we disclose personal information

We may disclose your personal information to:

  • Shopify and other service providers that help us run the store, such as payment processors (including PayPal), IT and cloud hosting providers, analytics and email marketing providers, and customer support tools;
  • Australia Post and other couriers, which receive your name, address and contact details to deliver your order;
  • marketing and advertising partners, to show you relevant advertising, in line with section 3 and their own privacy notices;
  • professional advisers, such as our accountants and lawyers;
  • government agencies, regulators and law enforcement, where the law requires or permits it; and
  • a buyer or successor, if our business is ever sold or restructured, with the same protections for your information.

We also disclose information when you ask or consent, for example to ship products to the address you provide. We do not sell your personal information.

Our relationship with Shopify

The Site is hosted by Shopify, which collects and processes personal information about your use of the Site to provide and improve the Services. To help protect, grow and improve our business, we use certain Shopify enhanced features that incorporate data from your interactions with our store, other merchants and Shopify. Where Shopify uses personal information for its own purposes, Shopify is responsible for that processing, including requests to exercise your rights. To learn more, see the Shopify Consumer Privacy Policy (https://www.shopify.com/legal/privacy/app-users) or the Shopify Privacy Portal (https://privacy.shopify.com/en).

8. Overseas disclosure

Some of our service providers store or process personal information outside Australia, most likely in Canada and the United States and possibly in other countries where they operate. If you are overseas, your information will also be transferred to Australia so we can fulfil your order. We take reasonable steps to make sure our providers handle personal information in a way that is consistent with the APPs. Data protection laws in your own country may also apply to you.

9. Security and retention

Security

We protect personal information using measures such as SSL encryption, PCI compliant payment processing, role-based access controls, multi-factor authentication and secure cloud backups. No system is completely secure, and information you send us by email or other unsecured channels may not be protected in transit, so please avoid sending sensitive information that way.

If a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC), as the Notifiable Data Breaches scheme requires.

Retention

We keep personal information only as long as we need it for the purposes described in this policy or as the law requires. As a guide:

  • order, invoice and payment records are kept for as long as the law requires, which for company financial records is generally seven years;
  • identification records are kept only for the period the law requires;
  • account information is kept until you close your account or ask us to delete it, unless we must keep it by law; and
  • marketing details are kept until you unsubscribe.

When we no longer need personal information, we destroy or de-identify it.

10. Your rights and choices

You can:

  • Access the personal information we hold about you;
  • Correct inaccurate, out-of-date, or incomplete information;
  • Ask us to delete information we no longer need and are not required to keep;
  • Opt out of marketing at any time using the unsubscribe link or by contacting us.

To make a request, email info@heritagestraitscoins.com.au. We may need to verify your identity first. We aim to respond within 30 days, and we do not charge you to make a request. If we cannot give you access or make a correction, we will tell you why, to the extent the law permits. For information that Shopify holds for its own purposes, you can use the Shopify Privacy Portal.

11. Complaints

If you have a privacy concern, please email info@heritagestraitscoins.com.au with the details. We will acknowledge your complaint within 5 business days and aim to respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.

12. Children

The Services are not intended for children, and we do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe your child has given us personal information, please get in touch with us, and we will delete it.

13. Third-party sites and platforms

The Site may link to other websites and platforms, including our social media pages and eBay store. If you buy from us on eBay, or interact with us on social media, those platforms’ own privacy policies apply to the information they collect. We are not responsible for the privacy practices of other sites.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or the law. We will post the updated policy on the Site with a new “Last updated” date and, where required, notify you.

15. Contact information

For privacy questions, requests or complaints: